Fix bug with extras for private git dependencies in Poetry manager

[hnimees]

How are you running Renovate?

Mend Renovate hosted app on github.com

If you're self-hosting Renovate, tell us what version of Renovate you run.

No response

If you're self-hosting Renovate, select which platform you are using.

None

Was this something which used to work for you, and then stopped?

I am trying to get this working for the first time

Describe the problem

Support extras for private git dependencies in Poetry manager. When extras is specified for a private git dependency in pyproject.toml Renovate will fail to check it out. A minimal reproduction is not possible since I would have to provide an encrypted PAT token for the private repo.

Relevant debug logs

Logs

DEBUG: Pull Request #4 does not need updating (branch="renovate/furl-2.x")
WARN: artifactErrors (branch="renovate/furl-2.x")
{
  "artifactErrors": [
    {
      "lockFile": "poetry.lock",
      "stderr": "[03:26:47.391] INFO (9): Installing tool python v3.11.4...\n[03:26:47.394] INFO (9): Preparing legacy tool python ...\ninstalling v2 tool python v3.11.4\nlinking tool python v3.11.4\nPython 3.11.4\npip 23.1.2 from /opt/containerbase/tools/python/3.11.4/lib/python3.11/site-packages/pip (python 3.11)\n[03:26:53.329] INFO (9): Installed tool python in 5.9s.\n[03:26:53.443] INFO (154): Installing tool poetry v1.5.1...\n[03:26:53.446] INFO (154): Preparing legacy tool poetry ...\ninstalling v2 tool poetry v1.5.1\nlinking tool poetry v1.5.1\nPoetry (version 1.5.1)\n[03:27:02.792] INFO (154): Installed tool poetry in 9.3s.\nUpdating dependencies\nResolving dependencies...\n\n/usr/local/bin/docker: line 4: .: filename argument required\n.: usage: . filename [arguments]\nCreating virtualenv renovate-1-Yykwca53-py3.11 in /home/ubuntu/.cache/pypoetry/virtualenvs\n\nHost key verification failed.\r\n"
    }
  ]
}

Have you created a minimal reproduction repository?

I have explained in the description why a minimal reproduction is impossible

[github-actions[bot]]

Hi there,

Get your issue fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this.

To get started, please read our guide on creating a minimal reproduction.

We may close the issue if you, or someone else, haven't created a minimal reproduction within two weeks. If you need more time, or are stuck, please ask for help or more time in a comment.

Good luck,

The Renovate team

[rarkins]

It's a feature request, not a problem - please update your description accordingly.

You can provide a reproduction repo even if the credentials are missing or dummy

[hnimees]

I accidentally made another comment instead of directly replying to this. Here is my linked reply: #23343 (comment)

[rushilsrivastava]

We've been running into this issue as well, this seems to be a bug. I would be open to putting up a PR to fix this if I can be pointed in the right direction

[hnimees]

I initially labeled it as a bug because Renovate already supports private git dependencies as well as extras. However, Renovate breaks if both are used together. In my setup I have a private repo that depends on another private repo. This works fine until I specify extras which causes Renovate to fail and error with "Host key verification failed.".

I have made both reproduction repositories public, and invalidated my keys: Repo1, Repo2

To reproduce, Repo2 should be made private.